CVE-2026-89942

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the anonymous buffer release process. An anonymous buffer handle maintains a reference to the IIO device, which is dropped during the release function. When a device is removed via unbind or hot-unplug, the buffer handle may hold the final reference. Because the release function utilizes a guard for the buffer mutex, the unlock occurs after iio device put(). If the anonymous buffer holds the last reference, both the IIO device and the buffer (which contains the mutex) are freed, resulting in a use-after-free when the mutex is subsequently unlocked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.